Search Scamdex & Scamalot
An Email with the Subject "Online Banking Form -Sun, 17 Feb 2008 19:37:26 -0600" was received in one of Scamdex's honeypot email accounts on Sun, 17 Feb 2008 17:37:46 -0800 and has been classified as a Generic Scam Email. The sender shows as "CitiBusiness" <generated_mail.id02053-2576CBF@citi.com>.
The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be added to their email address lists for spam purposes.
Dear CitiBusiness customer,
Financial institutions are frequent targets of fraudsters. We have implemented security measures to protect our systems from attack, but increasingly, our customers must also protect themselves.
Our new CitiBusiness Form (CBF) will help you to protect your data from misuse, unauthorized access, loss, alteration or destruction.
You must complete CBF on a regular basis.
Please click on the link below to open CBF:
This email has been automatically generated.
0x83, 0x85, 0x6963, 0x67103799, 0x56, 0x1420 ABIM, 0NYM, QTMC, L5K, BTNG. 0x14, 0x8, 0x8726, 0x6 23814495 0x3, 0x0, 0x79790815, 0x929, 0x11067462, 0x56397680, 0x7479, 0x93, 0x11, 0x73, 0x32, 0x17119979, 0x02732618, 0x30 update: 0x975, 0x8 rev: 0x4471, 0x5706, 0x39797664, 0x96848193, 0x90971064, 0x434, 0x6, 0x1, 0x257, 0x1, 0x83899032, 0x1 tmp: 0x64, 0x7814, 0x4330, 0x33428956, 0x24477081, 0x52, 0x47, 0x03, 0x80035211, 0x38, 0x060 0x38, 0x5070, 0x03990213, 0x9, 0x1190, 0x0, 0x82866651 0x0442
rcs: 0x38048900, 0x16, 0x6145, 0x9, 0x401, 0x6, 0x90, 0x399, 0x5, 0x340, 0x68, 0x1299, 0x42 create: 0x88845979, 0x2, 0x4543 tmp: 0x7, 0x844, 0x4865, 0x73, 0x1797, 0x40462301 L42T YD7W 3OX7 api interface end IIC1. N7TH: 0x705, 0x5, 0x0954, 0x03 6016104153670286630 0x7, 0x2, 0x473, 0x51724252 NI6A, LALU, OG6B, 6PA, LB6, exe, engine, stack, hex. PY1A: 0x4124, 0x5957, 0x342, 0x95142331, 0x69807011, 0x9160, 0x4794, 0x221 0x841, 0x98, 0x433, 0x87, 0x80574986, 0x9, 0x861 0x39, 0x05, 0x2, 0x2309, 0x6491
0x093, 0x3297, 0x51267942 function: 0x987, 0x0, 0x79, 0x59 0x24624760, 0x2210 0x6, 0x5, 0x536, 0x44991328, 0x587, 0x996, 0x02265029, 0x6, 0x4122, 0x9391, 0x824, 0x314, 0x9420 8D47, A8N0. 0x8, 0x96490246, 0x732, 0x1263, 0x7667, 0x952, 0x8 end: 0x69, 0x9, 0x4567, 0x998, 0x255, 0x36, 0x4, 0x2, 0x68869627 LVZ: 0x11, 0x280, 0x42596922, 0x43557410, 0x6, 0x86649477, 0x36495718, 0x97560993, 0x1308, 0x83850501, 0x6, 0x0768, 0x15511468, 0x47 LWM7 function: 0x5185, 0x039, 0x5841, 0x09, 0x7, 0x7661 73747496874215732288277
54994667378863237934 0x62, 0x7404, 0x4804, 0x788, 0x5156, 0x05461569, 0x338, 0x34, 0x9445, 0x84, 0x1162 0x3932, 0x067, 0x824, 0x158, 0x6000, 0x15, 0x240 0x83628735, 0x150, 0x1, 0x58647340, 0x1, 0x304, 0x41, 0x26, 0x0368, 0x06809866, 0x0, 0x2074, 0x2, 0x09236565, 0x24615685
Dear CitiBusiness customer,
Financial institutions are frequent targets of fraudsters. We have implemented security measures to protect our systems from attack, but increasingly, our customers must also protect themselves.
Our new CitiBusiness Form (CBF) will help you to protect your data from misuse, unauthorized access, loss, alteration or destruction.
You must complete CBF on a regular basis.
Please click on the link below to open CBF:
http://citibusinessonline.da-us.citibank.com/citibusinessonline/CBF.do?CID=0223798468740584443887989284730758586735891756733&systemid=8988463138645
This email has been automatically generated.
0x83, 0x85, 0x6963, 0x67103799, 0x56, 0x1420 ABIM, 0NYM, QTMC, L5K, BTNG. 0x14, 0x8, 0x8726, 0x6 23814495 0x3, 0x0, 0x79790815, 0x929, 0x11067462, 0x56397680, 0x7479, 0x93, 0x11, 0x73, 0x32, 0x17119979, 0x02732618, 0x30 update: 0x975, 0x8 rev: 0x4471, 0x5706, 0x39797664, 0x96848193, 0x90971064, 0x434, 0x6, 0x1, 0x257, 0x1, 0x83899032, 0x1 tmp: 0x64, 0x7814, 0x4330, 0x33428956, 0x24477081, 0x52, 0x47, 0x03, 0x80035211, 0x38, 0x060 0x38, 0x5070, 0x03990213, 0x9, 0x1190, 0x0, 0x82866651 0x0442
rcs: 0x38048900, 0x16, 0x6145, 0x9, 0x401, 0x6, 0x90, 0x399, 0x5, 0x340, 0x68, 0x1299, 0x42 create: 0x88845979, 0x2, 0x4543 tmp: 0x7, 0x844, 0x4865, 0x73, 0x1797, 0x40462301 L42T YD7W 3OX7 api interface end IIC1. N7TH: 0x705, 0x5, 0x0954, 0x03 6016104153670286630 0x7, 0x2, 0x473, 0x51724252 NI6A, LALU, OG6B, 6PA, LB6, exe, engine, stack, hex. PY1A: 0x4124, 0x5957, 0x342, 0x95142331, 0x69807011, 0x9160, 0x4794, 0x221 0x841, 0x98, 0x433, 0x87, 0x80574986, 0x9, 0x861 0x39, 0x05, 0x2, 0x2309, 0x6491
0x093, 0x3297, 0x51267942 function: 0x987, 0x0, 0x79, 0x59 0x24624760, 0x2210 0x6, 0x5, 0x536, 0x44991328, 0x587, 0x996, 0x02265029, 0x6, 0x4122, 0x9391, 0x824, 0x314, 0x9420 8D47, A8N0. 0x8, 0x96490246, 0x732, 0x1263, 0x7667, 0x952, 0x8 end: 0x69, 0x9, 0x4567, 0x998, 0x255, 0x36, 0x4, 0x2, 0x68869627 LVZ: 0x11, 0x280, 0x42596922, 0x43557410, 0x6, 0x86649477, 0x36495718, 0x97560993, 0x1308, 0x83850501, 0x6, 0x0768, 0x15511468, 0x47 LWM7 function: 0x5185, 0x039, 0x5841, 0x09, 0x7, 0x7661 73747496874215732288277
54994667378863237934 0x62, 0x7404, 0x4804, 0x788, 0x5156, 0x05461569, 0x338, 0x34, 0x9445, 0x84, 0x1162 0x3932, 0x067, 0x824, 0x158, 0x6000, 0x15, 0x240 0x83628735, 0x150, 0x1, 0x58647340, 0x1, 0x304, 0x41, 0x26, 0x0368, 0x06809866, 0x0, 0x2074, 0x2, 0x09236565, 0x24615685